|
221311
|
5.3 |
MEDIUM
Network
|
ibm
|
sterling_file_gateway
|
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequ…
|
CWE-22
Path Traversal
|
CVE-2019-4423
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221312
|
5.3 |
MEDIUM
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. IBM X-Force ID: 160951.
|
CWE-565
Reliance on Cookies without Validation and Integrity Checking
|
CVE-2019-4305
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221313
|
6.3 |
MEDIUM
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM X-Force ID: 160950.
|
CWE-384
Session Fixation
|
CVE-2019-4304
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221314
|
5.3 |
MEDIUM
Network
|
ibm
|
sterling_file_gateway
|
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2019-4280
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221315
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_extreme_scale
|
IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functional…
|
CWE-79
Cross-site Scripting
|
CVE-2019-4115
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221316
|
3.3 |
LOW
Local
|
ibm
|
websphere_extreme_scale
|
IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105.
|
CWE-269
Improper Privilege Management
|
CVE-2019-4112
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221317
|
6.1 |
MEDIUM
Network
|
ibm
|
websphere_extreme_scale
|
IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could …
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2019-4109
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221318
|
4.8 |
MEDIUM
Network
|
ibm
|
websphere_extreme_scale
|
IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functi…
|
CWE-79
Cross-site Scripting
|
CVE-2019-4106
|
2024-11-21 13:43 |
2019-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221319
|
6.5 |
MEDIUM
Network
|
ibm
|
websphere_mq websphere_mq_appliance
|
IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clu…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2019-4141
|
2024-11-21 13:43 |
2019-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221320
|
6.5 |
MEDIUM
Network
|
ibm
|
mq
|
IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vulnerable to a denial of service attack caused by an authen…
|
NVD-CWE-noinfo
|
CVE-2019-4378
|
2024-11-21 13:43 |
2019-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|